What's this about?
An open-source agent that runs security scans of networks you're authorized to test — entirely locally, from a phone.
What exactly is "pentesting"?
Penetration testing: probing your own systems the way an attacker would, to find holes before someone hostile does. Legitimate when authorized; the interesting part here is packaging it as a local agent on commodity hardware.
What's the community saying?
HN 104 points, 30 comments.
- On-device appeal: security tooling that phones home is its own risk; local-only agents dodge that.
- The obvious dual-use worry: the same convenience serves unauthorized scanning.
- Skepticism about depth — a phone agent runs scans, but real pentesting is the judgment layer above the scans.